Published: 23/02/2004 Updated: 29/04/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote malicious users to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xmb forum xmb 1.8_sp1
xmb forum xmb 1.8_sp2
xmb forum xmb 1.8

source: wwwsecurityfocuscom/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities The issues present themselves due to insufficient sanitization of remote user supplied data An attacker may exploit any one of these vulnerabilities to execute arbitrary script c ...

source: wwwsecurityfocuscom/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities The issues present themselves due to insufficient sanitization of remote user supplied data An attacker may exploit any one of these vulnerabilities to execute arbitrary script co ...

source: wwwsecurityfocuscom/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities The issues present themselves due to insufficient sanitization of remote user supplied data An attacker may exploit any one of these vulnerabilities to execute arbitrary script c ...

NVD-CWE-Other http://www.securityfocus.com/bid/9726 http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 http://marc.info/?l=bugtraq&m=107756526625179&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15294 https://exchange.xforce.ibmcloud.com/vulnerabilities/15292 https://docs.xmbforum2.com/index.php?title=Security_Issue_History https://nvd.nist.gov https://www.exploit-db.com/exploits/23746/

CVE-2004-0322

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect